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Abstract 

A transform that enables generator-matrix-based Reed-Solomon (RS) coded data to be re- 
covered under interpolation-based list decoding is presented. The transform matrix needs to be 
computed only once and the transformation of an element from the output list to the desired RS 
coded data block incurs k 2 field multiplications, given a code of dimension k. 
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"^5 ! I. INTRODUCTION 

O 

Since their inception in 1958, Reed-Solomon (RS) codes have found widespread use, e.g., 
>< I in compact discs (CDs), digital video broadcasting and high definition TV. Let $ be a cyclic 
subgroup of GF(g)\{0} of order n and a its generator. Then, following its original definition, 
{(c ,ci, . . . ,c n _i) G GF(g) n : a = m(a l ), < % < n - 1, m(x) = Y^Zo m j xJ e GF(q)[x]} 
is an (n, k) RS code over GF(g) with zeros a, a 2 , . . . , a n ~ k . In practice however, data is 
typically not encoded via the evaluation map 

Es, : GF(g) fc ^ GF(g) n 

: (m ,m 1 , . . . ,m fc _i) -> (m(l),m(a), . . . ,m(a n_1 )) (1) 
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implied by this definition. On the other hand, the interpolation-based RS list decoders of 
[1], [2] which allow far more errors to be corrected than previously thought possible, operate 
on the assumption that messages are encoded via an evaluation map. Incorporating such a 
decoder within an existing system employing RS codes is clearly desirable. For instance, it 
will allow a system to operate at a significantly lower signal-to-noise ratio while maintaining 
the same error performance. Nevertheless, incorporating such a decoder into an existing 
system requires the ability to recover the original RS coded data from the output list of this 
decoder. For the CD player for example, this would mean that we will not have to replace 
all our existing CDs. A method for recovering generator-matrix-based RS coded data under 
interpolation-based list decoding is therefore desirable as well. 

Such a method has implicitly been introduced in the proof of [3, Lemma 4]. The main idea 
there is as follows. Let vq,Vi, . . . ,v n -i be nonzero elements of GF(g). Then the codeword 
(c , Ci, . . . , c n _i) of an (n, k) generalized RS code defined by a basis of codewords given by 
the rows of the matrix 



/ 



v 
v 



via 



V n -l 
n-1 



Vn-ia 



(2) 



\ vo via" 

and the codeword (cq/v , ci/vi, . . . , c n _i/u n _i) of an (n, k) RS code defined by a different 
basis of codewords given by the rows of the matrix 



( I 



1 



1 



\ 



1 a 



a 



n-l 



\ 1 a k ~ x . . . ot^~ x>vl ~ x> J 
correspond to the same message. Thus, suppose the message (m , mi, . . . , m^-i) is en- 
coded via multiplication by Q and the resulting codeword transmitted and received as 



(fc-l)(n-l) 



(ro,r 1; . . . ,r n _i). Provided less than n — \J(k — l)n errors occur during transmission, the 
decoder of [1], operating on the premise that messages are encoded via the evaluation map 
in (CD), generates a list containing (m ,mi, . . . ,rrik-i) when applied to the modified received 
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word (tq/vq, ri/vi, . . . , r n _i/v n -\). The underlying basis transformation thus results in an 
overhead of n multiplications to the overall decoding complexity. The above method is 
however no longer applicable when the generator matrix Q is not of the form in (j2J), e.g. 
when Q has the same structure as the matrix in (jSJ). 

This correspondence presents a more general solution to the aforementioned problem in 
that our technique remains applicable given any generator matrix G a for an RS code. Since 
G a is arbitrary, the underlying basis transformation employed in our approach is different 
to that used in [3] - see Lemma [T] below. In fact, if messages are encoded as codewords of a 
narrow-sense RS code, no basis transformation is needed. For code rates of practical interest, 
an average computational overhead of 0(k 2 ) multiplications is added to the decoding process. 

We exploit certain properties of the Galois Field Fourier Transform (GFFT), including 
the fact that encoding a message block (mo, mi, . . . , mfc_i) via the evaluation map in (pQ) 
is equivalent to computing the GFFT of the n-tuple (m , m 1 , ... , m fc _!, 0, . . . , 0) - a con- 
sequence of property 2 of [4, Theorem 8-13]. Our main result is Theorem [1] in Section [TTT1 
below. However, before we can prove this theorem, we need a few lemmas. For the remainder 
of this correspondence, take the evaluation map to mean that specified by (CQ). Further, take 
an interpolation-based list decoder to mean an instance of the decoders of [1], [2]. 

II. LEMMAS LEADING TO THE KEY RESULT 

Without loss of generality, let q be a fixed power of 2. Suppose C is an (n, k) RS code 
over GF(g) with generator polynomial g(x) = YYi=b~ l+b i x ~ a% ) = Y^=o 9i x% - We do not 
assume that b = 1 so that C is not necessarily a narrow-sense RS code. 



Lemma 1. Let 



W 



I I \ 

o^" 1 ) ••• 



\0 • • ■ aC 6 " 1 )^- 1 ) J 

If c = (co, Ci, . . . , c n _i) G C, then c = c x W is a codeword of a narrow-sense (n, k ) RS code 
C over GF(q). 
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Proof: Let the code polynomial for c and c be written as c(x) = YH=o °i x% and c {y) 



Then 



where a = c,-cr 6 1 ' % 



n-l 



C{ X ) = C;« 
i=0 



(6-1)* 



.r 



a 



b-1 



n-l 

^Ciy 1 = c(y), 

i=0 



, y 



— . Since c(x) has zeros a , a 



a 



n-k—l+b 



(3) 



c(y) clearly has 



zeros a, a 2 a n k and the lemma follows. 



Next, let g(y) = ^^T giy 1 where (ji = gioft -1 ^. Since g(y) may not be monic, it is a 
code polynomial, but not necessarily, the generator polynomial of C. The following matrix 
is nevertheless 

go gi ■■■ g n -k • • • 

go ■■■ CJn-k-l 9n~k ■■■ 



G 



\ 



(4) 



\0 g n ~ k J 

a valid generator matrix for C, since the rows of G spam a vector space over GF(g) of 
dimension k. Let [U] denote the n x n matrix resulting from appending n — k rows to a 
k x n matrix (n > k) U such that each additional row is a right cyclic shift of the previous 
row by one position. Lemma [2] shows the relation between [G] and [G] where 

/» n. ..... n ... o \ 





G 



go 91 
go 



9n-k 
g-n-k-1 gn-k 



(5) 



9n-kJ 



\0 

is a generator matrix for the code C. 
Lemma 2. [G] x W = W x [G]. 



Proof: Denote the first row of [G] and [G] by (g , gi, ■ ■ ■ , g n -i) and (g , g u . . . , g n -x), 
respectively. Thus, gj = gj = for n — k + 1 < j < n — 1. Since a has order n by 
definition, the element of [G] and [G] located at the (s + l) th row and (t + l) th column, 
where < s, t < n - 1, are g t - S modn and ^_ smo dn = 5 , t- S modna (b ~ 1)i /« (b ~ 1)s ; respectively. 
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Hence, [G] may be obtained by multiplying the (t + l) th column of [G] by aS h 1 - )t and 
dividing the (s + l) th row of the resultant matrix by a^ -1 -* 5 . In matrix form, [G] = W _1 x 
[G] x W. ■ 

Let F and F _1 denote the n-point GFFT and inverse GFFT matrices over GF(g), ie. 



'l 1 

1 a 



1 

n-l 



V 



1 a n ~ l 



a 



(„-l)(n-l) 



(6) 



F-i 



il 1 

1 a- 1 



\ 



a 



-(n-l) 



V 



1 a-f"" 1 ) 



a 



-(n-l)(n-l) 



(7) 



Lemma [3] gives a decomposition of [G] in terms of F and F 1 . 

Lemma 3. [G] = F _1 x D x F where D is an n x n diagonal matrix such that its main 
diagonal is the inverse GFFT of the first row of [G]. 

Proof: Let the inverse GFFT of the first row of [G] be G(l) = (G , G x , . . . , G re _i). 
Since the (i + l) th row of [G] is the right cyclic shift of the first row of [G] by i positions, 
it follows from the modulation property of GFFT [5, Figure 6.1] that the inverse GFFT of 
the (i + l) th row of [G] is 

G(i + 1) = (Go, Gx/a\ G 2 /a 2 \ G^/aW). 

Consequently, the inverse GFFT of the rows of [G] in matrix form may be expressed as 

Go Gi G2 • • • G n _i 

G Gi/a G 2 /a 2 ■■■ G^i/a"" 1 



[G] x F- 



^ G Gi/a^ 1 G 2 /a 2(n ^ ■ ■ ■ G n _i/a 



(n-l)(n-l) 
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1 1 

1 a- 1 



a 



a 



-(n-l) 



1 a- {n ~ l) a~ 2{ - n - l) ■■■ q,-^- 1 )^- 1 ) 



/ 



Go 

d 











G n -i J 



F" 1 x 



/(? ••■ \ 
G x ■•• 



F 1 x D 



(8) 



V ■■• G n -i / 
The lemma is now immediate. ■ 
Since g(x) has zeros a, a 2 , . . . , a n ~ k , it follows from property 2 of [4, Theorem 8-13] that 
the last n — k elements of G(l) and in turn, the last n — k elements in the main diagonal of D, 
are all zero. Moreover, since g~i = gia^ b ~^ 1 , by the translation property of the GFFT [5, Figure 
6.1], the inverse GFFT (Go, Gi, . . . , Gk-i, 0, . . . , 0) of the n-tuple (go, gi, ■ ■ ■ , g n -k, 0, . . . , 0) 
is the right cyclic shift of the inverse GFFT of the n-tuple (go, gi, . . . , g n -k, 0, . . . , 0) by b — 1 
positions. 

III. THE KEY RESULT 

In this section, we present a method for retrieving from the output list of an interpolation 
based list decoder, messages encoded as codewords of the RS code C via a generator matrix 
G a given by G a = A x G for some k x k basis transformation matrix A. We assume that 
the decoder operates on the premise that messages are encoded as codewords of C via the 
evaluation map. 

Let A = ( A ) be a, k x n matrix where is a k x (n — k) all-zero matrix. In addition, 
let XJixj denote the % X j upper-left submatrix of U. Further, since the evaluation map may 
be interpreted as the n-point GFFT over GF(g), the relation between a codeword c of C 
and its preimage (/ , fi, ■ ■ ■ , fk-i) £ GF(q) k under this map may be expressed as c = f x F 
where f = (fo, fi, ■ ■ ■ , fk-i, 0, . . . , 0). We can now prove our main result, ie., Theorem [TJ 

Theorem 1. Let m G GF(g) fe be encoded as c £ C via the generator matrix G a . Then 



m 



T 



(A 



T\-l 



x (W 



kxk) 



1 x (FI 



i \-i 



kxk) 



x (D 



kxk) 



1 X (fx 



xk, 
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Proof: By Lemmas [T] to [3], 

c = cxW = mxG a xW = mxAxGxW 
= mxAx[G]xW = mxAxWx[G] 

= mxAxWxF~ 1 xDxF. (9) 

Since c = f x F, we have f=mxAxWx F _1 x D. Moreover, since F, F -1 , D and W 
are symmetric, 

f T = D x F _1 x W x A T x m T (10) 

Since the last n — k elements in the main diagonal of D as well as in the column vector 
A T x m T are all zero, the last n — k constraints in (T3~Q|) vanish and so (flOl) may be reduced to 
(f T )fcxi = D fcxfe x (F- 1 x W) fcxfc x (A T x m T ) fcxl . Because W is diagonal, (F^ 1 x W) fcxfc = 
F fcxfc x Wfcxfc- Moreover, (A T x m T ) fcx i = A T x m T and since F^ fc , D fcxfc , W kxk and A are 
all invertible, it follows that m T = (A T )- X x (Wfc Xfc ) -1 x (F^J" 1 x (D^)- 1 x (f lxfc ) T . ■ 
Interpreting f lx fc and m in Theorem [1] as an element of the output list and the desired data 
block, respectively, leads to Algorithm [2] below which summarizes the key steps involved to 
recover any generator-matrix-based RS coded data from the output list of an interpolation- 
based list decoder. 

Algorithm 2. 

Input: The zeros (a b , a b+1 , . . . , a n ~ k ~ 1+h ) of C and its generator matrix G a . 
Output: The desired messages corresponding to the elements of the output list. 
Precomputation (to be performed only once): 

i. Compute g(x) = YYi^o" 1 ^ ~ ct b+t ) = Y^=o 9 iX% an< ^ construct the matrix G for 
which the (i + l) th row, < % < n — 1, is the right cyclic shift of the n-tuple 
(g , gi, . . . , g n - k , 0, . . . , 0) by i positions. 

ii. Find A such that G a = A x G and (A T ) _1 . (Note: The matrix A can be easily found 
using standard techniques in linear algebra since G is in row echelon form.) 

iii. Compute the inverse GFFT of the n-tuple (go, g\, . . . , g n -k, 0, . . . , 0). Then right cyclic 
shift the resultant vector by b — 1 positions to obtain (Go, G\, . . . , Gk-i, 0, . . . , 0). 
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iv. Set (D kxk )~ l = diag{Gv\ G^\) and (W,^)" 1 = diag(l, a^ b ~ l \ a" 2 ^" 1 ), . . . , 

a -(*-l)(6-l)), 

v. Compute (F^)" 1 and B = (A T )~ 1 x (W^)" 1 x (F^,)" 1 X (D kxk )-\ (Note: Since 
Ffcxfc is symmetric, its inverse can be computed by eigenvalue decomposition.) 

List decoding & message recovery: 

1. Compute r = r x W = (ro, ric^ 6 " 1 ), . . . , r n _ia'"~ 1 ^''" 1 ') where r is the hard-decision 
received vector. 

2. List decode f . 

3. If the output list is not empty, then for each element fi xk in this list, return B x (f T )fc X i- 

A few remarks are in order. First, since the average list size is typically very close to unity 
[6] [2], Steps [TJ will incur close to k 2 + n — 1 GF(g)-multiplications on average. Thus, for 
code rates of practical interest, an average computational overhead of 0(k 2 ) multiplications 
is introduced on top of the computations incurred by Step [2]). Second, if b = 1, W reduces 
to an identity matrix such that W^x^ may be omitted in the computation of B. Finally, if 
messages were originally encoded by multiplication by g(x), then G a = G in this case with 
A reducing to an identity matrix. 

Example 1. Let C be a (7, 4) RS code over GF(8) with zeros a 2 , a 3 , a 4 . Its generator matrix 
is 



/ 


a 5 
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a 3 
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a 3 


a 2 


a 


\ 




a 6 





a 4 


a 3 


a 6 
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a 2 






o: 6 


a 2 


a 2 
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a 5 


a 6 
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Following Algorithm^ we obtain 
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a 2 
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a 2 









a 2 
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a 2 
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a 6 


a 5 


a 5 
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a 6 


a 3 


a 2 
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Applying the inverse GFFT to (go, g\, g<i, #3, 0, 0, 0) = (a 2 , a 3 , 1, 1, 0, 0, 0) and right cyclic 
shifting the resulting vector by 1 position yields (Go, G\, G2, G3, 0, 0, 0) = (a 6 , a 5 , 1, a 5 , 0, 0, 0) 
and so (D,^)" 1 = diag(a, a 2 , 1, a 2 ). Now, (W^^)" 1 = diag(l, a 6 , a 5 , a 4 ) and 

( a A a 3 a 5 a 3 \ 



(Y 



a 



a 5 a 3 ci^ 



a 3 a a 2 a 6 



Hence, 



B = (A ) x (W 



1 x (F^ 1 ,)- 1 



x (D 



/ 5 3 \ 



a 4 a 5 a 3 1 



a 5 a 2 



a 



\ 



J 



111 



a a a a 

Suppose the codeword c = (a 2 , 0, a, 0, 0, a 3 , a 6 ) is transmitted and received as r. If list decoding 
the vector f = r x W is successful, f = (a, 0, a 5 , 1, 0, 0, 0) will be in the output list. We 
can recover the original message m T = B x fj xl = (a 3 , a 2 , 0, a 5 ) T . It can be verified that 
c = m x G a . 



IV. CONCLUSION 

To summarize, we have established a relationship between codewords resulting from 
generator-matrix-based encoding, and codewords obtained via the evaluation map. We have 
further derived from this relationship, an algorithm for recovering generator-matrix-based 
coded data under interpolation-based list decoding. 

References 

[1] V. Guruswami and M. Sudan, "Improved decoding of Reed-Solomon and algebraic-geometric codes," 

IEEE Trans. Inf. Theory, vol. 45, pp. 1757-1767, 1999. 
[2] R. Koetter and A. Vardy, "Algebraic soft-decision decoding of Reed-Solomon codes," IEEE Trans. Inf. 

Theory, vol. 46, pp. 2809-2825, 2003. 
[3] V. Guruswami and A. Vardy, "Maximum-likelihood decoding of Reed-Solomon codes is NP-hard," IEEE 

Trans. Inf. Theory, vol. 51, pp. 2249-2256, July 2005. 



February 1, 2008 



DRAFT 



10 



[4] S. B. Wicker, Error Control Systems for Digital Communication and Storage. Prentice Hall, 1995. 
[5] R. E. Blahut, Algebraic Codes for Data Transmission. Cambridge University Press, 2003. 
[6] R. J. McEliece, "On the average list size for the Guruswami-Sudan decoder," 7th. International 
Symposium on Communication Theory and Applications, pp. 2-6, 2003. 



February 1, 2008 



DRAFT 



